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(54) Method and system for providing copies of scrambled content with unique watermarks, and 
system for descrambling scrambled content 



(57) A system for providing or playing back a copy 
of scrambled content with a unique watermark compris- 
es a storage device containing a scrambled copy water- 
marked with first pre determined bits, a scrambled copy 
watermarked with second pre-determined bits and a 
processing unit programmed to provide at a request re- 
ceived from a user a copy of the complete scrambled 
content by combining parts of the scrambled copy wa- 
termarked with first predetermined bits and parts the 
scrambled copy watermarked with second predeter- 
mined bits in a manner unique to the user. In a system 
for providing scrambled content in particular by broad- 
casting, the scrambler for scrambling a clear content to 



provide scrambled content uses a first key(K F ) to scram- 
ble the clear content. A processing device is pro- 
grammed to provide clear content comprising a plurality 
of double parts, one part watermarked with first prede- 
termined bits and one part watermarked with second 
predetermined bits, wherein the scrambler scrambles 
the parts watermarked with first predetermined bits with 
a second key(K z ) and the parts watermarked with sec- 
ond predetermined bits with a third key(K D ). A key man- 
agement program enforces receivers adapted to de- 
scramble the scrambled content with a combination of 
descrambled parts watermarked with first predeter- 
mined bits and parts watermarked with second prede- 
termined bits unique to the respective receivers. 
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Description 

[0001] The invention generally relates to fingerprint- 
ing or watermarking of content and more specifically to 
a method and system for providing copies of scrambled 
content with unique watermarks. The invention further 
relates to a system for providing scrambled content in 
particular by broadcasting and to a system for descram- 
bling scrambled content. 

[0002] In order to prevent unauthorised copying of 
content, content is generally scrambled, wherein only 
authorised users having the correct key(s) for descram- 
bling are able to use the content. Generally the content 
is both compressed and scrambled. However, after de- 
compressing and descrambling unauthorised copies 
could be made. In order to locate the source of unau- 
thorised copies, it is desirable to fingerprint or water- 
mark content however without decompressing and de- 
scramblingthecontent. Fingerprinting normally involves 
processing the content by adding predetermined noise 
orthe like to the content. When the content is scrambled, 
access to the content is not available, so normally the 
content should be descrambled before the fingerprint or 
watermark can be added. Additionally, it is desirable to 
add the fingerprint in a highly insecure environment. Un- 
der such circumstances it is undesirable to descramble 
and rescramble the content for the watermarking proc- 
ess as it is very likely that the environment is tampered 
with to bypass the watermarking process, Moreover, 
adding watermarks and rescrambling requires signifi- 
cant processing capacity. 

[0003] The invention aims to provide a method and 
system for providing copies of scrambled content, 
wherein unique watermarks can be added in a relatively 
simple manner. 

[0004] According to a first aspect of the invention a 
method for providing copies of scrambled content with 
unique watermarks is provided, characterized by pro- 
viding at least two copies of at least parts of the content, 
one copy watermarked with first predetermined bits, and 
one copy watermarked with second predetermined bits, 
scrambling the copy watermarked with first predeter- 
mined bits, scrambling the copy watermarked with sec- 
ond predetermined bits and providing a user copy of the 
scrambled content by combining parts of the scrambled 
copy watermarked with first predetermined bits and 
parts the scrambled copy watermarked with second pre- 
determined bits in a manner unique for the user copy. 
[0005] According to a second aspect the invention 
provides a system for providing or playing back a copy 
of scrambled contentwith a unique watermark, compris- 
ing a processing unit and a storage device, character- 
ized in that the storage device contains at least a scram- 
bled copy of at least parts of the content watermarked 
with first predetermined bits, and a scrambled copy of 
at least parts of the content watermarked with second 
predetermined bits, and in that the processing unit is 
programmed to provide at a request received from a us- 



er a copy of the complete scrambled content by com- 
bining parts of the scrambled copy watermarked with 
first predetermined bits and parts the scrambled copy 
watermarked with second predetermined bits in a man- 
s ner unique to the user. 

[0006] In particular in broadcast applications the in- 
vention involves adding a watermark to scrambled con- 
tent which is descrambled in real time in a receiver or 
descrambled during playback of content stored to disk. 
10 According to a third aspect the invention provides a sys- 
tem for providing scrambled content, in particular by 
broadcasting, comprising a scrambler for scrambling 
clear content to provide scrambled content, character- 
ized by a processing device programmed to provide 
is clear content comprising a plurality of parts in two or 
more copies, each copy watermarked with predeter- 
mined bits unique to the copy, wherein the scrambler 
scrambles at least the watermarked copies with a cor- 
responding key(K Z; K D ), and a key management pro- 
20 gram enforcing receivers adapted to descramble the 
scrambled content to provide clear content with a pre- 
determined combination of descrambled watermarked 
copies at each receiver, the clear content thereby having 
a watermark unique to the respective receiver. 
25 [0007] According to a further aspect of the invention 
a system is provided for descrambling scrambled con- 
tent, comprising a descrambler for descrambling the 
scrambled content, and a processing device for provid- 
ing keys to the descrambler, characterized in that the 
30 processing device is programmed to provide the second 
key(K z ) orthird key(K 0 ) such that the scrambled content 
is descrambled with a combination of descrambled parts 
watermarked with first predetermined bits and parts wa- 
termarked with second predetermined bits unique to the 
35 descrambling system. 

[0008] The invention will be further explained by ref- 
erence to the drawings in which two embodiments of the 
invention are schematically shown. 
[0009] Fig. 1 schematically shows an application of 
40 the method and system of the invention in an Internet 
environment. 

[0010] Fig. 2 schematically shows an application of 
the method and system of the invention in a broadcast- 
ing environment. 
45 [001 1 ] In the embodiments described hereinafter ze- 
ro's will be used as first predetermined bits and one's 
will be used as second predetermined bits. It is however 
contemplated that predetermined bit sequences of mul- 
tiple bits are used to watermark the copies used in the 
so method and system of the present invention. Furtheron- 
ly two copies watermarked with zero's and one's, re- 
spectively are used in the examples described. It will be 
understood that more than two copies, each water- 
marked with a predetermined bit sequence, can be used 
55 in the method and system of the invention. 

[0012] Referring to fig. 1 there is shown an embodi- 
ment of the invention in an Internet application, wherein 
a server 1 is connected in a known mannerto the Inter- 
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net 2 and a large number of clients 3 is also connected 
to the Internet. It is noted that the Internet is only men- 
tioned as an example of a network capable of providing 
a connection between a server 1 and clients 2. Any other 
type of connection can be used. 
[0013] The server 1 comprises a processing unit 4 
and a storage device 5, such as a hard disc. The storage 
device 5 contains three copies of the content, which is 
for example a movie. Each copy stored in the storage 
device 5 is scrambled in a suitable manner. A first copy 
referred to as neutral copy in this specification is just 
scrambled. A second copy of the content is obtained by 
adding a watermark with one's only to at least parts of 
the complete content. Thereafter the second copy is 
scrambled in a suitable manner, so that a scrambled 
copy watermarked with one's is obtai ned . The th i rd copy 
is obtained by watermarking at least parts of the content 
with zero's only and thereafter scrambling the copy wa- 
termarked with zero's in a suitable manner. It is noted 
that in practice the size of the watermarked copies may 
comprise for example only 1 -20% of the complete mov- 
ie. However it is possible to watermark the complete 
movie with one's and zero's, respectively. In that case it 
is not necessary to use a neutral scrambled copy Fur- 
ther it is noted that the copies of the content need not 
to be stored on the same disc or at the same server. 
[001 4] If a user requests the download of a scrambled 
copy of the content from the server 1 by means of a client 
computer 2, a watermark unique to the user/client 3 is 
added as follows. This watermark is a unique identifica- 
tion made up of a unique sequence of one's and zero's. 
In accordance with this unique sequence of one's and 
zero's the processing unit 4 combines parts of the neu- 
tral copy, the copy watermarked with zero's and the copy 
watermarked with one's and forwards the combination 
from the server 1 to the client 3. In this mannerthe client 
3 receives a scrambled copy with a unique watermark 
added to the same, wherein for adding the watermark it 
is not necessary to descramble and rescramble the con- 
tent in the relatively insecure environment of the server. 
The unique identification of one's and zero's and a user 
identification are stored in the storage device 5 or any 
other suitable storage device. 

[0015] The neutral scrambled copy of the content is 
used to reduce the amount of data that needs to be 
stored in the storage device 4. However, it is possible to 
apply the method for providing a scrambled copy with 
watermark without using a neutral scrambled copy. Fur- 
ther, it is noted that the server 1 can also be a consumer 
home apparatus for playing back stored content. 
[0016] Fig. 2 shows an embodiment of the method of 
the invention as used in a broadcast application. A sys- 
tem 6 for broadcasting scrambled content comprises a 
scrambler 7forscrambling clear content in a usual man- 
ner. For example keys are used by the scrambler 7 in a 
known scrambling algorithm, wherein the keys are in- 
serted into the stream scrambled content as entitlement 
control messages (ECM's). In the broadcast application 



of fig. 2, the watermark is added to the content during 
decryption at a system 8 for descrambling the scram- 
bled content received from the broadcasting system 6. 
Descrambling in the system 8 can be real time or during 

s playback at a later time if the system 8 comprises a suit- 
able storage medium, for example a hard disc. 
[0017] The broadcasting system 6 comprises a 
processing device 9 receiving the content to be broad- 
casted, for example a movie. The processing device 9 

10 is programmed to provide a plurality of double parts or 
so-called double illuminated parts. If the movie is for ex- 
ample compressed according the MPEG algorithm, I- 
frames or parts thereof to keep the bandwidth of the sys- 
tem down, are double illuminated and both double illu- 

15 minated sections are provided with a watermark by add- 
ing a watermark of zero's only to the first section and a 
watermark of one's only to the second section of each 
double illuminated part. The processing device 9 for- 
wards the neutral sections and the double illuminated 

20 sections to the scrambler 7 and controls the scrambler 
7 to use a first key K F to scramble to neutral sections, a 
second key K z to scramble the sections watermarked 
with zero's and a third key K 0 to scramble the sections 
watermarked with one's. 

25 [0018] The broadcasting system 6 comprises a de- 
vice 10 for providing a key management program en- 
forcing descrambling systems 8 or more generally re- 
ceivers adapted to descramble the scrambled content 
with a combination of descrambled sections water- 

30 marked with zero's and sections watermarked with 
one's unique to the respective receivers 8. In this man- 
ner each system 8 provides a clear content stream with 
an identification unique to the system. 
[001 9] The device 1 0 can for example provide ECM's 

35 with the first key K F and the second key K z or the third 
key K 0 . During broadcasting the scrambled content, the 
device 10 provides ECM's to the respective receiving 
systems 8 alternatingly containing the second K z or the 
third key K 0 to obtain the unique combinations of one's 

40 and zero's at the respective receiving systems 8. 

[0020] The receiving system 8 for descrambling the 
scrambled content comprises a descrambler 11 for de- 
scrambling the scrambled content and a processing de- 
vice 12 for providing keys obtained from the ECM's re- 

45 ceived to the descrambler 11 . A processing unit 13 re- 
ceives the scrambled content and extracts the ECM's 
from the content and forwards the ECM's to the process- 
ing device 12. In an embodiment wherein the device 10 
of the broadcasting system 6 provides ECM's with the 

so first key K F and the second key K z or the third key K 0 , 
the processing device 12 delivers the keys to the de- 
scrambler 11 , so that a clear content with a unique com- 
bination of zero's and one's will be obtained. For, if the 
second key K z is available, only the section watermark 

55 with zero's can be descrambled whereas if only the K 0 
is available only the section watermarked with one's can 
be descrambled. In this embodiment watermarking the 
clear content is controlled directly from the broadcasting 
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system 6. 

[0021] As an alternative, the key management pro- 
gram can be downloaded or permanently stored in the 
processing device 12, which is made as a secure device 
in this case, i.e. a device which can not be tampered 
with, such as a smart card. In such a case the smart 
card 12 could receive an ECM including all three keys 
K F , K z and K 0 , wherein the keys are provided to the de- 
scrambler 11 in a manner unique to the smart card 12. 
[0022] As stated above it will be understood that in- 
stead of double parts and two keys K z and K 0 as in the 
embodiment of fig. 2, the processing device can be pro- 
grammed to provideclear content with a plurality of parts 
in more than two copies using more than two keys for 
scrambling and descrambling, respectively, the copies. 
[0023] Although a movie is mentioned as an example 
of content it will be understood that the invention can be 
used with any type of video or audio content. In embod- 
iments where secrecy is not important a neutral copy in 
the clear can be used instead of a scrambled copy. In 
the system of fig. 2, the ECM's would comprise the keys 
K z and K 0 only. 

[0024] Further, it is noted that the system of fig. 2 can 
also be used in other applications for providing copies 
with unique watermarks by means of a key management 
program. 

[0025] The invention is not restricted to the above de- 
scribed embodiments which can be varied in a number 
of ways within the scope of the attached claims. 



Claims 

1. Method for providing copies of scrambled content 
with unique watermarks, characterized by provid- 
ing at least two copies of at least parts of the con- 
tent, one copy watermarked with first predeter- 
mined bits, and one copy watermarked with second 
predetermined bits, scrambling the copy water- 
marked with first predetermined bits, scrambling the 
copy watermarked with second predetermined bits 
and providing a user copy of the scrambled content 
by combining parts of the scrambled copy water- 
marked with first predetermined bits and parts the 
scrambled copy watermarked with second prede- 
termined bits in a manner unique for the user copy. 

2. Method according to claim 1 , wherein a neutral copy 
of the content is provided and a user copy of the 
scrambled content is provided by combining parts 
of the neutral copy, parts of the scrambled copy wa- 
termarked with first predetermined bits and parts 
the scrambled copy watermarked with second pre- 
determined bits in a manner unique for the user 
copy. 

3. System for providing or playing back a copy of 
scrambled content with a unique watermark, com- 
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prising a processing unit and a storage device, 
characterized in that the storage device contains 
at least a scrambled copy of at least parts of the 
content watermarked with first predetermined bits, 
and a scrambled copy of at least parts of the content 
watermarked with second predetermined bits, and 
in that the processing unit is programmed to provide 
at a request received from a user a copy of the com- 
plete scrambled content by combining parts of the 
10 scrambled copy watermarked with first predeter- 
mined bits and parts the scrambled copy water- 
marked with second predetermined bits in a manner 
unique to the user. 

'5 4. System according to claim 3, wherein the process- 
ing unit is further programmed to store a user iden- 
tification together with the corresponding unique 
combination of watermarked copies. 

20 5. System according to claim 3 or 4, wherein the stor- 
age device further contains a neutral copy of the 
content, wherein the processing unit is pro- 
grammed to provide a user copy of the complete 
content by combining parts of the neutral copy, parts 

25 of the scrambled copy watermarked with first pre- 
determined bits and parts the scrambled copy wa- 
termarked with second predetermined bits in a 
manner unique to the user. 

so 6. System for providing scrambled content, in particu- 
lar by broadcasting, comprising a scrambler for 
scrambling clear content to provide scrambled con- 
tent, characterized by a processing device pro- 
grammed to provide clear content comprising a plu- 

35 rality of parts in two or more copies, each copy wa- 
termarked with predetermined bits unique to the 
copy, wherein the scrambler scrambles at least the 
watermarked copies with a corresponding key(K z , 
K G ), and a key management program enforcing re- 

40 ceivers adapted to descramble the scrambled con- 
tent to provide clear content with a predetermined 
combination of descramb led watermarked copies at 
each receiver, the clear content thereby having a 
watermark unique to the respective receiver. 

45 

7. System according to claim 6, wherein the scrambler 
uses a first key(K F ) to scramble the clear content, 
wherein the processing device is programmed to 
provide clear content comprising a plurality of dou- 

so ble parts, one part watermarked with first predeter- 
mined bits and one part watermarked with second 
predetermined bits, wherein the scrambler scram- 
bles the parts watermarked with first predetermined 
bits with a second key(K z ) and the parts water- 

ss marked with second predetermined bits with a third 
key(K 0 ). 

8. System according to claim 6, comprising a device 
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for providing entitlement control messages for re- 
ceivers with at least two keys (K Z ,K 0 ), wherein the 
keys are alternated to obtain said unique water- 
marks at the respective receivers. 

5 

9. System according to claim 7, comprising a device 
for providing entitlement control messages for re- 
ceivers with the first key(K F ), second key(K z ) or 
third key(K 0 ), wherein the second key(K z ) and third 
key(K 0 ) are alternated to obtain said unique com- 10 
binations of second predetermined bits and first 
predetermined bits at the respective receivers, 
wherein the first key can be the same as the second 

or third key(K z ,K 0 ). 

15 

10. System for descrambling scrambled content, com- 
prising a descramblerfor descrambling the scram- 
bled content, and a processing device for providing 
keys to the descrambler, characterized in that the 
processing device is programmed to provide at 20 
least a second key(K z ) or third key(K Q ) such that 

the scrambled content is descrambled with a com- 
bination of descrambled parts watermarked with 
first predetermined bits and parts watermarked with 
second predetermined bits unique to the descram- 25 
bling system. 
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